govoplan-identity/README.md

GovOPlaN Identity

Repository type: module (platform).

govoplan-identity is the canonical identity directory module for GovOPlaN.

It owns identities and links between identities and platform accounts. This is separate from IDM connectors and from access control.

Boundary

Identity owns:

• identity records for people, services, and other internal subjects
• account links for identities that can use multiple accounts
• primary account selection for display and explainability
• accepted normalized identity facts after import or manual administration

Identity does not own:

• password authentication, sessions, API keys, or CSRF
• roles, rights, permission evaluation, or access decisions
• organization units, functions, or function assignments
• external directory connector internals

Module Contract

The module registers the identity.directory capability from govoplan_core.core.identity.

Feature modules should consume the capability instead of importing identity ORM models.

Development Install

From the core checkout:

cd /mnt/DATA/git/govoplan-core
./.venv/bin/python -m pip install -e ../govoplan-identity